Phase 3 commit #5 per docs/PHASE3.md §12. Wires safety.norris_step
(commit #4) into the REPL with the user-facing surface.
ffi/readline.lua extensions (A1 + R-C4):
- rl_insert_text + rl_redisplay added to ffi.cdef block; M.insert_text
and M.redisplay wrappers exposed.
- M.bind: removed `:free()` on previous callback. Now keeps every
bound callback pinned for process lifetime in `_pinned` list
(alongside `_bound[seq]` for current lookup). Avoids the
use-after-free window between unbind and rebind that R-C4 flagged.
Memory cost is bounded — one closure per key sequence binding.
context.lua Norris suffix (R-C3 / §8):
- to_messages() composes a dynamic NORRIS MODE block onto the
system prompt when ctx.norris_active is set. The block carries
ctx.norris_goal so eviction of the user's "[norris] goal:" turn
doesn't lose the anchor. Returns to plain system prompt when
Norris exits.
repl.lua Norris driver:
- prompt() now shows ⚡ marker when ctx.norris_active per PHASE0.md §9.
- \C-n bound to a real handler — inserts ":norris " at the cursor
(replaces Phase 1 status placeholder).
- run_norris(goal) function: sets norris_active + norris_goal,
appends a "[norris] <goal>" user turn, renders the banner, then
loops calling safety.norris_step with an injected helpers table
until a terminal status returns. Renders the closing banner.
- norris_halt(): the [N] proceed/skip/abort prompt called by
safety.norris_step via helpers.halt. Empty input → abort (safe).
- dispatch_tool(): factored from the Phase 2 ask_ai code so
safety.norris_step can call it.
- norris_exec(): factored exec path for autonomous mode (skips
the interactive run_shell cd-status renderer).
- :norris <goal> meta — launches autonomous mode
- :norris off meta — drops Norris flag (rare; usually 'abort')
- :safety patterns meta — lists active is_destructive rules
- :safety check <cmd> meta — probes a hypothetical command
End-to-end mock-driven test:
Submitted ":norris find files in /tmp" → banner → step 1 emits
tool_call (auto_approved per policy) → dispatched → frame rendered
→ step 2 emits "GOAL: complete" → sub-loop exits → DONE banner.
2 broker invocations, no stalls.
config.lua safety example block lands in commit #6.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
marfrit
a404b2a152